Privacy Policy

BraidHouse is a product of Pyrate, Inc. This Policy governs your use of BraidHouse, and references to "Pyrate" below mean Pyrate, Inc., the entity that operates it.

This privacy policy (this "Policy") explains how personal information is collected, used, and disclosed by Pyrate, Inc. and its designated agents, employees and subsidiaries ("Pyrate" or "we"). This Policy applies to businesses and service providers (individually referred to as "you") who use Pyrate's websites, applications, and other online services (collectively, our "Sites").

Other third parties, such as clients who book appointments through our Sites, payment processors, and social networks that you use in connection with our Sites, may also collect, use, and share information about you. This Policy does not cover such third parties or their services. For information about third-party privacy practices, please consult with them directly.

Information We Collect

We collect information about you in various ways when you use our Sites. We use this information to provide the functionality and improve the quality of our Sites and personalize your experience. We may collect the following categories of personal information:

Your Business Information

• Identifiers such as your business name, shop name, email address, postal address, phone number, logo, profile photo
• Financial information such as billing information and bank account details for payment disbursements
• Commercial information such as service offerings, pricing, appointment history, client interactions
• Professional information such as portfolio images, certifications, specialties, availability

Client Data (Processed on Your Behalf)

When clients book appointments through our platform, we collect and process the following limited information on your behalf:

• First name and last name
• Phone number
• Instagram handle
• Appointment details and preferences
• Payment card information (processed through PCI-compliant third-party payment processors)

Automatically Collected Information

When you visit our Sites, some information is automatically collected. For example, when you visit our Sites, we may automatically collect your location, computer operating system, Internet Protocol (IP) address, access times, browser type and language, and the website you visited before our Sites. We also collect information about your usage and activity on our Sites using certain technologies, such as cookies and web beacons.

Optional Google Calendar Connection

Google Calendar is an optional connection for appointment booking and calendar synchronization. If you connect it, we receive your Google account email address and authorization credentials. The current integration reads events on your primary calendar, including event identifiers, titles, start and end times, and cancellation status, to display your schedule and identify blocked time. We also receive notifications when calendar events change.

We create, update, and delete Pyrate appointment events on your primary calendar as bookings change. Those events can include the client's name, appointment description, business location, and appointment times. Calendar authorization uses a separate Google project from the optional Gmail connection and does not grant access to your email.

Authorization credentials are encrypted in storage. We temporarily cache external event details in server memory for calendar display. Cached results are reused for up to three minutes before a fresh read is required; this does not mean the cached data is automatically deleted after three minutes. We retain identifiers for events created by Pyrate to support synchronization. Relevant calendar information may be processed by the infrastructure and AI service providers we use to operate the assistant, including OpenRouter and the model providers that answer your calendar or booking requests.

Pyrate's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google Calendar data, use it for advertising, or use it to train general-purpose AI models. We share it only as permitted by that policy, including as needed to provide the features you request, for security purposes, to comply with law, or in a business transfer with your prior consent. These limits apply to Google Calendar data even where this Policy describes broader uses of other information.

Disconnect Google Calendar or Request Data Deletion

You can disconnect the separate Google Calendar connection in your account settings or revoke its access in your Google account. Disconnecting in Pyrate removes the saved Calendar credentials, clears the temporary event cache, stops further access through that connection, and attempts to remove Pyrate-created events from Google Calendar. It leaves your independently connected Gmail account connected. If you still use an older combined Gmail and Calendar connection, disconnecting that connection can stop both integrations until you connect them separately.

Disconnecting does not automatically delete appointment records or assistant conversations already stored in Pyrate. To request deletion of Calendar information held by Pyrate, email support@getpyrate.com with the subject "Google Calendar data deletion" and identify your Pyrate account and connected Google email address. Do not send your password or authorization credentials.

We retain information as needed to provide the features you request and process deletion requests, subject to the legal obligations and dispute-resolution needs described under Data Retention below. We may verify your identity and authority before processing a request and explain any information that must be retained. Deletion from Pyrate does not delete events or information independently held by Google or other calendar participants.

Connected Instagram Accounts

If you connect an Instagram professional account, we receive the account's identifier and username, access credentials, and the direct-message conversations made available to the integration. Conversation data can include participant identifiers and profile information, message text, timestamps, and attachments such as reference photos.

We use this information to identify your connected account, display and review client inquiries, identify unanswered booking requests, and help you respond to clients. When you authorize the assistant to handle a conversation, it uses relevant messages and your business information to prepare and send replies on your behalf. You can choose to handle a conversation yourself or disconnect Instagram.

Message content and attachments are stored to support the conversation and may be processed by the infrastructure and AI service providers we use to operate the assistant, including OpenRouter and the model providers that generate replies. Pyrate does not sell Instagram data, use it for advertising, or use it to train general-purpose AI models. These limits apply to Instagram data even where this Policy describes broader uses of other information.

We retain connected-account and conversation information as needed to provide these features and respond to your requests. Information may also be retained where necessary to meet legal obligations or resolve disputes, as described under Data Retention below.

Disconnect Instagram or Request Data Deletion

To stop the integration, open your account settings in the app, select Instagram, and choose Disconnect. This removes the saved connection credentials and stops further access through that connection. Disconnecting does not automatically erase conversations or business records already stored in the app.

To request deletion of Instagram information held by Pyrate, email support@getpyrate.com with the subject "Instagram data deletion." Include your Instagram username and the Pyrate or BraidHouse account, business, or conversation associated with your request so we can locate the information. You may also contact us if you messaged a business using our service and want to request deletion of your information. Do not send your password or access token.

We may verify your identity and your authority to request deletion before processing the request. We will explain any information that must be retained to meet legal obligations or resolve disputes. Deletion from Pyrate does not delete messages or account information held independently by Instagram or another participant.

How We Use Information

We use personal information collected through our Sites for the purposes described in this Policy or disclosed to you on our Sites or otherwise in connection with our services. We may use your information to:

• Make and change appointments made through our Sites
• Process payments from clients and disburse funds to your accounts
• Operate and improve our Sites, products, and services
• Understand you and your preferences to enhance, personalize, and customize your experience
• Process and deliver contest entries and rewards
• Respond to your comments and questions and provide customer service
• Send you information relating to our products and services, including appointment confirmations, receipts, technical notices, updates, security alerts, and support and administrative messages
• Communicate with you about features, updates, promotions, and other news about products and services offered by Pyrate
• Link or combine with other personal information we get from third parties to help understand your needs and provide you with better service
• Authenticate your account information
• Protect, investigate, and deter against fraudulent, unauthorized, or illegal activity

Pyrate may store and process personal information in the United States and other countries.

How We Share Information

Payment Card Information

To use certain services on our Sites, such as to process client payments and receive disbursements, we may require credit or debit card account information. By submitting payment card account information through our Sites, you expressly consent to the sharing of such information with third-party payment processors and other third-party service providers.

Pyrate collects and processes all payments through recognized professional payment gateway providers. We use PCI-compliant third-party payment processors to handle all payment transactions. We do not store credit card numbers or sensitive authentication data on our servers.

When processing payments, we share transaction information with our third-party payment service providers. These third parties may store payment information, other than CVV numbers, for future use on our Sites. CVV numbers are not stored and must be re-entered for each transaction.

Service Providers

We may share personal information with affiliates, third-party vendors, consultants, and other service providers who work for us. We may share your information with third parties who provide services to us, such as data collection, reporting, ad response measurement, site analytics, as well as assistance with delivery of relevant marketing messages and advertisements.

Other Sharing

We do not sell your personal information to third parties. We may disclose your personal information:

• To comply with laws and to respond to lawful requests and legal process
• To protect the rights and property of Pyrate, our agents and customers, and others, including to enforce our agreements, policies, and terms of use
• In an emergency to protect the personal safety of Pyrate, its customers, or any person
• To a third party if we sell, transfer, divest, or disclose all or a portion of our business or assets to another company in connection with or during negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction, or proceeding

We may also share aggregated or de-identified information with third parties in our discretion.

Data Ownership and Your Responsibilities

Shared Data Rights. While you maintain primary ownership of your client relationships and business data, Pyrate retains certain rights to use aggregated and anonymized data derived from our platform to improve our services, develop new features, and generate industry insights. We may use de-identified client data patterns, booking trends, and service analytics for business intelligence purposes.

You retain ownership of your specific client contact information and business records. However, by using our platform, you grant Pyrate a license to process, analyze, and derive insights from this data in aggregated form. We will not directly contact your clients for marketing purposes without your explicit consent.

As a user of our platform, you are responsible for:

• Obtaining necessary consents from your clients for data collection and processing
• Complying with applicable privacy laws in your jurisdiction
• Responding to your clients' data access, correction, and deletion requests that relate to your services
• Maintaining the accuracy of client information you input
• Cooperating with Pyrate in addressing any data protection requirements

Security of Your Personal Information

Pyrate takes reasonable steps to help protect your personal information in an effort to prevent loss, misuse, unauthorized access, disclosure, alteration, and destruction. When your credit or debit card account information is being transmitted to our Sites or through our Sites, it will be protected by encryption technology, such as Secure Sockets Layer (SSL).

To be clear, Pyrate does not itself store your credit or debit card account information, and we do not have direct control over or responsibility for your credit or debit card account information. Our contracts with third parties that receive your credit or debit card account information require them to keep it secure and confidential.

Nonetheless, we cannot guarantee that transmissions of your credit or debit card account information or personal information will always be secure or that unauthorized third parties will never be able to defeat the security measures taken by Pyrate or our third-party service providers. We assume no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized third-party access, or other causes beyond our control.

Your Rights Regarding Your Personal Information

You have certain rights with regard to your personal information:

• You have the right to know and request information about the categories and specific pieces of personal information we have collected about you within the last 12 months, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the categories of third parties with whom we share such information
• You have the right to update your personal information
• You have the right to request a portable copy of your personal information
• You have the right to request that Pyrate delete your personal information, subject to certain exceptions allowed under applicable law
• You have the right to not be discriminated against for exercising any of the above-listed rights

You may exercise these rights by contacting Pyrate at support@getpyrate.com. We may take reasonable steps to verify your identity prior to responding to your requests.

Your Information Choices

You may opt out of receiving promotional emails from Pyrate by following the instructions in those emails. If you opt out, we may still send you non-promotional emails, such as emails about your Pyrate account or our ongoing business relations.

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Sites.

Most mobile devices allow you to turn off location services. If you choose to turn off location services, this could affect certain features or services of our Sites.

Data Retention

We will process your data:

• For the conclusion and performance of the contract - until the contract is terminated or expires, and then until the end of the limitation period for claims
• For marketing of products or services - until the termination or expiry of the contract or until you object to the processing of your data for this purpose
• For the purpose of establishing, investigating or defending against claims - until the end of the limitation period for claims
• To comply with legal obligations - until the expiry of data retention obligations under the law
• For the purpose of producing compilations, analyses, statistics for internal needs - for the duration of the agreement and then until the end of the limitation period for claims or until an objection is raised

Notice to California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). You have the right to know what personal information we collect, the right to delete personal information (subject to certain exceptions), and the right to opt-out of the sale of personal information. We do not sell personal information.

If you choose to exercise your rights, we won't charge you different prices or provide different quality of services unless those differences are related to value provided to Pyrate by your data. To make such a request, please contact us at support@getpyrate.com.

Children's Privacy

Pyrate services are not directed at children under the age of 16 and Pyrate has no actual knowledge of the sale of information of minors under 16 years of age. By using Pyrate services, you represent that you are at least eighteen years old and understand that you must be at least eighteen years old in order to create an account and use Pyrate services.

Changes to This Policy

Pyrate may update or revise this Policy from time to time. You agree that you will review this Policy periodically. If we make any changes to this Policy, we will change the "Last Updated" date above. You are free to decide whether or not to accept a modified version of this Policy, but accepting this Policy, as modified, is required for you to continue using our Sites. If you do not agree to the terms of this Policy or any modified version of this Policy, your sole recourse is to terminate your use of our Sites.

Contact Information

For questions about accessing, changing, or deleting your personal information, please send an email to support@getpyrate.com.

For questions or opinions on this Policy, please contact Pyrate via email at support@getpyrate.com or by postal mail at: